Abstract: Embodiments include methods, electronic device, storage medium, and computer program to implement a dedicated queue based on a user request. In one embodiment, a method comprises: receiving a first message to optimize one or more data flows based on a quality-of-service request for an end user; enabling a first queue dedicated to the one or more data flows sourced for the end user in the network node based on the first message; and upon a determination of congestion in the network, marking packets in the one or more data flows stored in the first queue as candidates to drop based on a queue size of the first queue, wherein the marking is to set explicit congestion notification bits of the packets.

Abstract: An embodiment is a method by one or more network devices implementing a network token generator in a network. The method includes receiving a request from an end node to apply a network service to network traffic originated by the end node, wherein the end node implements an identifier-locator separation network protocol and is associated with an identifier and a locator in accordance with the identifier-locator separation network protocol, generating a network token based on the identifier associated with the end node but not based on the locator associated with the end node in response to receiving the request, associating the network token with the network service, and sending the network token to the end node.

Abstract: Embodiments include methods, electronic device, storage medium, and computer program to implement a dedicated queue based on a user request. In one embodiment, a method comprises: receiving a first message to optimize one or more data flows based on a quality-of-service request for an end user; enabling a first queue dedicated to the one or more data flows sourced for the end user in the network node based on the first message; and upon a determination of congestion in the network, marking packets in the one or more data flows stored in the first queue as candidates to drop based on a queue size of the first queue, wherein the marking is to set explicit congestion notification bits of the packets.

Abstract: An embodiment is a method by one or more network devices implementing a network token generator in a network. The method includes receiving a request from an end node to apply a network service to network traffic originated by the end node, wherein the end node implements an identifier-locator separation network protocol and is associated with an identifier and a locator in accordance with the identifier-locator separation network protocol, generating a network token based on the identifier associated with the end node but not based on the locator associated with the end node in response to receiving the request, associating the network token with the network service, and sending the network token to the end node.

Abstract: A method and system support communication between a service executed by an edge server and a mobile application. The method includes receiving a transmission control protocol (TCP) handshake with an Internet Protocol (IP) anycast address from the mobile application; replying to the TCP handshake with an IP unicast address for the service to be utilized for a transport layer security (TLS) session; and establishing the TLS session between the service and the mobile application using the IP unicast address.

Abstract: A method by a network device to restrict access to a management interface, where the management interface is defined by a data model, and where the network device is provided by an equipment provider to an equipment operator for use by the equipment operator. The method includes receiving a first request from a management system to perform a first management operation that involves accessing a module of the data model, where the first request specifies a security credential as a key for a security wrapper defined by the module, and where the security credential is supplied to the management system by the equipment provider and is inaccessible to the equipment operator, verifying whether the security credential specified by the first request is valid, and performing the first management operation in response to verifying that the security credential specified by the first request is valid.

Abstract: A method and system support communication between a service executed by an edge server and a mobile application. The method includes receiving a transmission control protocol (TCP) handshake with an Internet Protocol (IP) anycast address from the mobile application; replying to the TCP handshake with an IP unicast address for the service to be utilized for a transport layer security (TLS) session; and establishing the TLS session between the service and the mobile application using the IP unicast address.

Abstract: A method is implemented by a network device where the method performs a trace flow process in a packet processing pipeline of the network device. The packet processing pipeline includes a trace table and a forward table. The method encompasses forwarding a trace packet to the trace table, forwarding a copy of the trace packet to a trace analyzer in response to determining that a trace bit is set in the trace packet, forwarding the trace packet to the forward table, and determining a next stage of the packet processing pipeline based on trace packet meta data and a value stored in a trace register.

Abstract: A method implemented by a user equipment (UE) in a cellular communication network to support incremental deployment of identifier locator network protocol (ILNP) breakout. The method includes receiving an advertisement for a first access point name (APN) and a second APN from a source eNodeB, where the first APN is associated with a user plane packet gateway (P-GWu) that is implemented at the source eNodeB, and where the second APN is associated with a packet gateway (P-GW) in a core of the cellular communication network, establishing a first PDN session associated with the first APN, establishing a second PDN session associated with the second APN, sending traffic destined for a first Correspondent Node (CN) that is determined to be ILNP capable via the first PDN session, and sending traffic destined for a second CN that is determined not to be ILNP capable via the second PDN session.

Abstract: A method implemented in a network device to enable scalable network path tracing. The method includes receiving a data packet with operations, administration and maintenance (OAM) information, updating a previous node identifier field in the OAM information, updating a current node identifier field in the OAM information, and sending a copy of the updated data packet with OAM information to a collector to build a packet trace.

Abstract: Improved handover processing in a cellular communication network to enable mobility within the cellular communication network without anchor points by way of a source tunnel router (TR) that forwards traffic destined for a user equipment (UE) that is transferring its connection to a target gNodeB, a target user plane function (UPF) and a target TR, as well as by way of the target tunnel router (TR) and target gNodeB, where the target TR and target gNodeB relay traffic between a user equipment (UE) and other devices connected to the cellular communication network. The handover processing by the source TR includes receiving a routing locator (RLOC) of the target TR connected to the target UPF and the target gNodeB from a session management function (SMF), redirecting traffic with an endpoint identifier (ED) of the UE to the target TR, receiving a release message from the SMF, and removing state for the EID of the UE.

Abstract: A method implemented by a network device functioning as a source gNodeB in a cellular communication network to support incremental deployment of identifier locator network protocol (ILNP) breakout in the cellular communication network. The method includes sending a list of data network names (DNNs) advertised by an access and mobility management function (AMF) to a user equipment (UE), receiving from the UE a first request for a first session with an ILNP session and service continuity (SSC) mode, facilitating the UE establishing a first packet data network (PDN) session associated with a UE selected DNN, where the first PDN session requests the ILNP SSC mode, receiving from the UE a second request for a second session to the selected DNN using a non-ILNP SSC mode, and facilitating the UE establishing a second PDN session to the selected DNN using the non-ILNP SSC mode.

Abstract: A method implemented by a network device functioning as a source gNodeB in a cellular communication network to support incremental deployment of identifier locator network protocol (ILNP) breakout in the cellular communication network. The method includes sending a list of data network names (DNNs) advertised by an access and mobility management function (AMF) to a user equipment (UE), receiving from the UE a first request for a first session with an ILNP session and service continuity (SSC) mode, facilitating the UE establishing a first packet data network (PDN) session associated with a UE selected DNN, where the first PDN session requests the ILNP SSC mode, receiving from the UE a second request for a second session to the selected DNN using a non-ILNP SSC mode, and facilitating the UE establishing a second PDN session to the selected DNN using the non-ILNP SSC mode.

Abstract: A method by a network device to restrict access to a management interface, where the management interface is defined by a data model, and where the network device is provided by an equipment provider to an equipment operator for use by the equipment operator. The method includes receiving a first request from a management system to perform a first management operation that involves accessing a module of the data model, where the first request specifies a security credential as a key for a security wrapper defined by the module, and where the security credential is supplied to the management system by the equipment provider and is inaccessible to the equipment operator, verifying whether the security credential specified by the first request is valid, and performing the first management operation in response to verifying that the security credential specified by the first request is valid.

Abstract: A method implemented by a network device in a cellular communication network with a distributed data plane serving gateway (S-GWu) at an evolved universal terrestrial radio access network (E-UTRAN) node B (eNodeB). The method enables an ingress tunnel router to forward traffic between devices connected to the cellular communication network via location identifier separation protocol (LISP) to enable mobility within the cellular communication network without anchor points.

Abstract: A method implemented in a network device to enable scalable network path tracing. The method includes receiving a data packet with operations, administration and maintenance (OAM) information, updating a previous node identifier field in the OAM information, updating a current node identifier field in the OAM information, and sending a copy of the updated data packet with OAM information to a collector to build a packet trace.

Abstract: A method is implemented by a network device where the method performs a trace flow process in a packet processing pipeline of the network device. The packet processing pipeline includes a trace table and a forward table. The method encompasses forwarding a trace packet to the trace table, forwarding a copy of the trace packet to a trace analyzer in response to determining that a trace bit is set in the trace packet, forwarding the trace packet to the forward table, and determining a next stage of the packet processing pipeline based on trace packet meta data and a value stored in a trace register.

Abstract: A method implemented by a user equipment (UE) in a cellular communication network to support incremental deployment of identifier locator network protocol (ILNP) breakout. The method includes receiving an advertisement for a first access point name (APN) and a second APN from a source eNodeB, where the first APN is associated with a user plane packet gateway (P-GWu) that is implemented at the source eNodeB, and where the second APN is associated with a packet gateway (P-GW) in a core of the cellular communication network, establishing a first PDN session associated with the first APN, establishing a second PDN session associated with the second APN, sending traffic destined for a first Correspondent Node (CN) that is determined to be ILNP capable via the first PDN session, and sending traffic destined for a second CN that is determined not to be ILNP capable via the second PDN session.

Abstract: A method is implemented by a network device functioning as an evolved universal terrestrial radio access network (E-UTRAN) node B (eNodeB) in a cellular communication network to support incremental deployment of identifier locator network protocol (ILNP) breakout in the cellular communication network. The method includes advertising a first access point name (APN) and a second APN to a user equipment (UE), where the first APN is associated with a user plane packet gateway (P-GWu) that is implemented at the source eNodeB, and where the second APN is associated with a packet gateway (P-GW) in a core of the cellular communication network.

Abstract: A method is implemented by a network device in a cellular communication network. The method to improve handover processing by a source evolved universal terrestrial radio access network (E-UTRAN) node B (eNodeB) where the source eNodeB forwards traffic destined for a user equipment (UE) that is transferring its connection to a target eNodeB to enable mobility within the cellular communication network without anchor points. The method including receiving a handover request from the UE identifying the target eNodeB, sending a handover message to the target eNodeB, determining the UE is unavailable to the source eNodeB, and redirecting traffic for the UE to the target eNodeB.